vulnerability

Cisco FTD: CVE-2021-34756: Cisco Firepower Threat Defense Software Command Injection Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 27, 2021

Added

Jan 29, 2025

Modified

Mar 31, 2026

Description

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.

Solution

cisco-ftd-upgrade-latest

References

CVE-2021-34756
https://attackerkb.com/topics/CVE-2021-34756
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmdinject-FmzsLN8
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-21406
CISCO-cisco-sa-ftd-cmdinject-FmzsLN8
CWE-20
CWE-78
EUVD-EUVD-2021-21406

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report